Photo vault apps for iPhone: how to choose one

The best photo vault app for iPhone encrypts your photos on the device with a key only you can unlock, works without an account, says plainly what it can’t protect against, backs up to storage you control in a form you can restore, and lets you export everything cleanly. Anything else, including a clever disguise, is a bonus. This guide gives you the checklist, the red flags, and 5 tests you can run in about 15 minutes before you trust an app with anything.

We make Bunker, so read our view with that in mind. We don’t rank or rate other apps here. Where we compare ourselves to a specific app, we do it on its own page and say where it’s better: see the comparisons linked at the end.

The 6 things that matter

1. Encryption on your device, with your secret as the key

Your photos should be encrypted on your iPhone before they’re stored, with a key that comes from something only you know: a PIN, a Pattern, a passphrase. If the key is stored next to the files, or the app’s PIN screen is just a door in front of ordinary files, anyone who copies the app’s data gets your photos.

What to look for: a security page that names the methods (for example, a memory-hard key derivation such as Argon2id, and authenticated encryption such as AES-GCM or ChaCha20-Poly1305) and says that thumbnails and file names are encrypted too. Thumbnails are where weak apps leak.

2. No account, or an account that can’t open your files

If an app needs your email and offers “reset your PIN by email”, the company can probably let someone in. A vault that needs no account has nobody to call, which is the point.

3. Honest limits

Every security tool has limits. A trustworthy vault lists them: what happens if you forget your secret, whether someone with your unlocked phone and your PIN sees everything, whether screenshots can really be blocked (on every surface, they can’t), what a decoy or duress feature does and doesn’t clear. If a page lists none, it’s either hiding them or hasn’t thought about them.

4. A backup you control, and can restore

The most common way people lose vault photos isn’t hacking. It’s a new phone. Look for:

Backup to your storage, such as your own iCloud, not only the company’s servers.
Encryption before the backup leaves the phone.
A clear restore path on a new device, and a recovery method if you forget your secret.
Status you can see: last backup time, progress, what’s paused.

5. Export that gives your files back

You should be able to save everything back to Photos or Files, at full quality, any time. Bonus: an option to remove location and camera details when you export or share.

6. A business model you can live with

Ads inside a privacy app are a contradiction: ad networks need data to work. Prefer a clear one-time price or subscription, a privacy label that says “Data Not Collected” or close to it, and analytics that are off unless you turn them on.

Red flags

Slogans instead of specifics. Phrases borrowed from the military or banking, or promises that nothing can ever break in. Real security writing names methods and limits.
A disguise sold as protection. Calculator or fake-app disguises are fine as a layer, but some disguised apps store photos as ordinary files behind the disguise. Ask what happens if someone copies the app’s data, not what the icon looks like. See Bunker vs. calculator vault apps.
“Wrong PIN” screens that reveal too much. If a decoy feature exists but a wrong code behaves differently from a decoy code, the decoy doesn’t fool anyone who’s paying attention.
Ads, or tracking across apps, listed in the App Store privacy label.
Password reset by email for the vault itself.
No backup, or backup only to the company, with no way to export.
Reviews describing lost photos after moving phones. Read the 1- and 2-star reviews and search for “new phone”.

5 checks you can run yourself

You don’t need to be technical. Install the app, add 3 unimportant photos, and try these:

The app switcher test. Open a photo in the vault, then swipe up to the app switcher. Does the preview show your photo? A good vault covers it.
The lock test. Leave the app, wait a few seconds, come back. Does it ask for your secret again? Lock your phone and wake it. Same question.
The new-phone test. Turn on backup, wait for it to finish, delete the app, reinstall it, and restore. Did all 3 photos come back? If the app needs a second device to test properly, borrow one. This is the most important test on the list.
The export test. Export one photo to Files. Is it full quality? Can you choose to remove its location?
The privacy label check. On the App Store page, scroll to App Privacy. “Data Used to Track You” is a bad sign for a vault.

If an app fails test 3, don’t put anything in it that you can’t afford to lose.

Where Bunker stands on this list

Since we’re asking you to judge apps by these points, here’s how Bunker answers them, including where it falls short:

Encryption: vaults are encrypted on your iPhone, iPad or Mac with keys only your Pattern or your Recovery Phrase can unlock. Thumbnails, file names and notes are encrypted too.
No account. There’s nothing to sign in to, and we have no copy of your keys.
Limits, stated: if you forget your Pattern and lose your Recovery Phrase, nobody can open the vault, including us. Someone who watched you draw your Pattern can open that vault. Screenshot blocking is best-effort. A Duress Vault clears other vaults only from this device; your iCloud backup still holds them.
Backup: Encrypted Backup goes to your own iCloud, encrypted before it leaves the device, and it’s free. There’s a moving-devices checklist; see how to move a photo vault to a new iPhone.
Export: to Photos, Files or the share sheet, with “Remove location and camera details” on by default for Photos and sharing.
Business model: no ads, no tracking across apps, analytics off unless you turn them on. Free holds 3 Vaults, with 100 photos, 10 videos and 20 documents and notes in total; Bunker Pro is $1.99 a week, $19.99 a year with a 7-day free trial, or $39.99 once.

Where other apps may suit you better: if you want a web app, an Android version, or a vault you can open with Face ID or Touch ID, Bunker doesn’t offer those: in this version, a vault opens only with its Pattern, its Passphrase or its Recovery Phrase.

When you don’t need a vault app

If nobody else knows your iPhone passcode and you only want photos out of your main library, Apple’s built-in Hidden album and app locking are enough. See how to hide photos on iPhone and how to lock photos on iPhone.

Comparisons

Each of these says where the other app is better:

Questions

Are photo vault apps actually secure?

Some are and some aren't. A vault is only as good as its encryption and its key. Look for encryption on the device with a key derived from a secret only you know, and a security page that names its methods and its limits. An app that only puts a PIN screen in front of ordinary files isn't a vault.

Do I need an account for a photo vault?

No, and it's better without one. An account means the company holds something about you, and often a way to reset access. A vault that needs no account can't be opened through the company.

What happens to my vault if I lose my phone?

That depends entirely on the backup. Check that the app backs up to storage you control, that the backup is encrypted before it leaves the phone, and that you can restore it on a new device. Test this before you need it.

Is a calculator vault app safe?

The disguise is not the security. Some disguised apps encrypt properly and some don't. Judge one by the same checks as any vault: encryption, key, backup, export and honesty about limits.

Which photo vault app is the best?

We don't rank apps on claims we can't verify. Use the checklist on this page; it takes about 15 minutes, and it will tell you more than a list of stars.